debonda.com uses cookies and similar digital technologies to ensure our website functions reliably, to process secure booking holds, and to analyze site performance. Necessary cookies load automatically because the website cannot operate without them. We never load non-necessary scripts, such as analytics or marketing pixels, until you give your explicit consent through our banner. You can change your preferences or withdraw your consent at any time by clicking the Cookie Settings link in our footer.
1. What Cookies Are
Cookies are small text files downloaded to your computer, tablet, or smartphone when you visit a website. They allow the website to recognize your device, store your currency preferences, maintain secure booking sessions, and remember your consent choices. Similar technologies, such as browser web storage and tracking pixels, operate alongside cookies to support site functionality and analytics.
2. Our Four Cookie Categories
We group our cookies and scripts into four distinct categories based on their operational purpose:
Necessary Cookies: Essential technical scripts required for the website to function, navigate pages, process secure Stripe payment sessions, and retain your selected currency. These cannot be disabled.
Preferences Cookies: Scripts that remember your display settings and customized interface choices across site visits.
Analytics Cookies: Tools that collect anonymous, aggregated data regarding site traffic, popular island tours, and navigation patterns to help us improve user experience.
Marketing Cookies: Tracking scripts and social media pixels used to deliver relevant brand advertisements and evaluate campaign conversion performance across external digital networks.
3. Consent Framework and Logging Mechanism
When you arrive at debonda.com, our interactive consent banner allows you to accept all cookies, reject non-necessary scripts, or customize your category choices. Non-necessary scripts load only after you provide explicit opt-in consent. To demonstrate compliance with European and Croatian law, our system records your choice in a secure audit log. Each consent log captures your specific consent version, an exact timestamp, and an anonymized, hashed IP address. You hold the right to modify your preferences or withdraw your consent at any time by clicking the Cookie Settings link permanently located in our website footer.
4. Third-Party Tools by Category
We deploy carefully selected third-party tools to support our digital infrastructure. Individual tools may be inactive at any given time; a consent-gated script loads only if it is both enabled on our platform and covered by your active consent. The tools configured on our platform are:
Google Tag Manager (Category: Analytics): A technical container used to manage conditional script loading based on your active consent status.
Google Analytics 4 (Category: Analytics): Measures website traffic, user engagement, and tour page conversion metrics. Loads strictly after explicit Analytics consent.
Hotjar and Microsoft Clarity (Category: Analytics): Generate anonymous heatmaps and session interaction insights to optimize website navigation. Load strictly after explicit Analytics consent.
Meta Pixel and TikTok Pixel (Category: Marketing): Measure social media advertising campaign performance and help deliver relevant travel content to interested audiences. Load strictly after explicit Marketing consent.
Web Push Notification Delivery: Browser push services used to send updates you subscribe to, activated solely after explicit browser-level permission.
5. Necessary Cookies and Local Storage
Our platform relies on a small set of first-party cookies and browser storage entries to ensure secure and functional operations:
debonda_cookie_consent (browser storage): Stores your active cookie consent preferences so the consent banner does not reappear on every visit.
debonda_visitor_id (browser storage): An anonymous identifier used to connect your consent record and secure your booking hold during checkout.
debonda_currency (browser storage): Remembers your selected display currency across our experience catalog.
__stripe_mid and __stripe_sid (cookies): Set by Stripe to process card authorization securely and prevent fraudulent checkout transactions.
6. Do-Not-Track Browser Signals
Some modern web browsers offer Do-Not-Track (DNT) or Global Privacy Control (GPC) privacy settings. Our consent management is built on an explicit opt-in principle, which means optional Analytics and Marketing scripts never load without your affirmative consent, regardless of browser signals.
7. Cross-Reference to Privacy Policy
Cookies may involve the processing of digital identifiers that constitute personal data under GDPR. For comprehensive information regarding our Data Controller identity, statutory retention timelines, international data transfer mechanisms, and your statutory right to lodge a complaint with AZOP, please read our full Privacy Policy.